Legal
Subprocessor Register
- Version
- 0.1
- Status
- In legal review
- Last updated
- 18 September 2026
In legal review.
Our lawyers are reviewing this register and the commitments on it. The providers listed are announced: chosen and published before any of them processes customer data.
What this page is
A subprocessor is a third party that processes customer data on our behalf. Every one of them is listed here. If a company is not on this list, it does not touch your data.
Each subprocessor is bound by a written data processing agreement with terms no weaker than the ones we give you, and each has been assessed before being engaged.
Our commitments
- This list is complete. No subprocessor is engaged that is not published here.
- You get 30 days' notice before a new subprocessor starts processing customer data, so you have time to object. Subscribe to changes at the bottom of this page.
- If you object on reasonable data protection grounds, we will work with you to find a solution. If we cannot, you may terminate the affected service without penalty.
- We publish where each subprocessor stores data, not only who they are. Where a subprocessor stores data matters more than where it is incorporated.
Infrastructure subprocessors
These handle or store customer database contents and backups.
| Provider | Service provided | Data processed | Location of processing | Transfer mechanism | Status |
|---|---|---|---|---|---|
| HetznerHetzner Online GmbH, Gunzenhausen, Germany | Dedicated servers that run customer databases, in the Falkenstein data centre park (FSN1), and object storage for the primary backup repository in the same location. Hetzner provides the hardware, power, network and storage; the servers are operated by us. | Customer database contents, Write-ahead log held on the server, Backups in the primary repository | Germany | None required. Processing stays in the EEA | Announced. Not processing yet |
| ScalewayScaleway SAS, Paris, France | Object storage for the second backup repository, in Paris (fr-par). A different provider in a different country from the primary, so one provider or one location failing does not reach both copies. | Backups in the second repository | France | None required. Processing stays in the EEA | Announced. Not processing yet |
Backups are written to two object storage repositories: the primary at Hetzner in Germany and the second at Scaleway in France, a different provider in a different country.
Platform subprocessors
These handle account, billing and support data but never customer database contents.
| Provider | Service provided | Data processed | Location of processing | Transfer mechanism | Status |
|---|---|---|---|---|---|
| PostmarkAC PM, LLC, Chicago, United States | Sends our transactional email: sign-in codes, password resets, service alerts and billing notices. No content from customer databases is put in an email. Postmark keeps the content of each message for up to 45 days. | Recipient email address, Message content, Delivery events | United States | EU-U.S. Data Privacy Framework certification, and Standard Contractual Clauses in its data processing agreement | Announced. Not processing yet |
| SentryFunctional Software, Inc., San Francisco, United States | Error tracking for our website, dashboards and control plane. Error reports are stored in Sentry’s EU region, in Frankfurt, and never contain content from customer databases. Sentry keeps our account, organisation settings, project keys and audit log in the United States. | Error reports, Request references and route patterns | Germany, United States | EU-U.S. Data Privacy Framework certification, with Standard Contractual Clauses in its data processing agreement as the fallback | Announced. Not processing yet |
A note on backup locations
Your backups are deliberately stored in two places, and the second is in a different country. This is what makes your data survive the loss of an entire location. It also means your data is not confined to a single country, and we would rather you learned that from this page than from an audit. The specific countries for each of our locations are published on the Locations page before you buy.
Changes to this register
| Date | Subprocessor | Change |
|---|---|---|
| 18 September 2026 | Hetzner | Announced |
| 18 September 2026 | Scaleway | Announced |
| 18 September 2026 | Postmark | Announced |
| 18 September 2026 | Sentry | Announced |
To be notified of changes, email [email protected] and ask to be added to the subprocessor notification list, or subscribe to our changelog.
Version history
Every version of this document stays available. Where a change materially reduces the commitments in it, account holders are notified by email at least 30 days before it takes effect.
- Version 0.1 · 18 September 2026 · First version, written from our own architecture. In legal review.